Threat Intelligence Database

CVE-2026-76375 affects the AD LDAP app for Splunk SOAR versions 2.3 and from 2.3 up to but not including 2.3.8. In these versions, a user with permission to run actions can cause sensitive credentials to be written in plaintext to a persistent debug log file by invoking a specific action. This exposure arises because the full connector process environment is logged, potentially revealing sensitive information. The vulnerability has a medium severity with a CVSS score of 5. No known exploits are reported in the wild. The issue is fixed in version 2.3.8 or later.

CVE-2026-76374 affects the AD LDAP app for Splunk SOAR versions before 2.3.8. It allows users with permission to run actions to cause sensitive Active Directory response data to be written to persistent debug log files. This exposure could reveal sensitive user information or provide guidance to an attacker. The vulnerability has a medium severity rating with a CVSS score of 4.3.

CVE-2026-76373 affects the AD LDAP app for Splunk SOAR versions 2.3 and from 2.3 up to but not including 2.3.8. It allows a user with permission to run actions to inject crafted input into LDAP queries, potentially enumerating Active Directory objects, reading sensitive attributes, and redirecting account modification actions to unintended objects. The vulnerability arises from improper neutralization of special elements in LDAP queries constructed from externally influenced input.